Critical vulnerability archive — page 448

Progress Software Corporation1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2024-4358 · Progress Software Corporation Telerik Report Server

Registration Authentication Bypass Vulnerability

KEV · due 4 Jul EPSS 97%public exploit SSVC act CVSS 9.8

Google1 vulnerability on this pageMax CVSS 9.6Priority 98KEV 1

CVE-2024-5274 · Google Chrome

Google Chromium V8 Type Confusion Vulnerability

KEV · due 18 Jun EPSS 8%public exploit SSVC act CVSS 9.6

f-logic1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-34854 · f-logic datacube3

F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`

EPSS 13%public exploit CVSS 9.8

AutomationDirect5 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-21785 · AutomationDirect P3-550E

A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9.

EPSS 2%public exploit CVSS 9.8

CVE-2024-22187 · AutomationDirect P3-550E

A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirec…

EPSS 1%public exploit CVSS 9.1

CVE-2024-24962 · AutomationDirect P3-550E

A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3…

EPSS 1%CVSS 9.8

CVE-2024-24963 · AutomationDirect P3-550E

A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3…

EPSS 1%CVSS 9.8

CVE-2024-23601 · AutomationDirect P3-550E

A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9.

EPSS 0.7%CVSS 9.8

ItsourceCode3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-5519 · ItsourceCode Learning Management System Project In PHP

ItsourceCode Learning Management System Project In PHP login.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-5516 · itsourcecode Online Blood Bank Management System

itsourcecode Online Blood Bank Management System massage.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-5517 · itsourcecode Online Blood Bank Management System

itsourcecode Online Blood Bank Management System changepwd.php sql injection

EPSS 0.9%CVSS 9.8

dino_physics_school_assistant_project4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-35354 · dino_physics_school_assistant_project dino_physics_school_assistant

A vulnerability has been discovered in Diño Physics School Assistant version 2.3.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-35355 · dino_physics_school_assistant_project dino_physics_school_assistant

A vulnerability has been discovered in Diño Physics School Assistant version 2.3.

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-35353 · dino_physics_school_assistant_project dino_physics_school_assistant

A vulnerability has been discovered in Diño Physics School Assistant version 2.3.

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-35359 · dino_physics_school_assistant_project dino_physics_school_assistant

A vulnerability has been discovered in Diño Physics School Assistant version 2.3.

EPSS 0.4%public exploit CVSS 9.8

aten1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-43845 · aten pe6208

Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account.

EPSS 0.5%public exploit CVSS 9.8

qdrant1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-3584 · qdrant qdrant/qdrant

Path Traversal in qdrant/qdrant

EPSS 0.5%public exploit CVSS 9.8

totolink1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-35398 · totolink cp900_l

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.

EPSS 0.6%public exploit CVSS 9.8

anpviz2 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2024-35343 · anpviz ipc-d250_firmware

Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to th…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-35344 · anpviz ymf50b_firmware

Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device.

EPSS 0.4%public exploit CVSS 9.9

campcodes6 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-33799 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker t…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-33800 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-33801 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an at…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-33805 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker t…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-33806 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-33808 · campcodes complete_web-based_school_management_system

A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker…

EPSS 0.5%public exploit CVSS 9.8

ptrd1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2024-22590 · ptrd kwik

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection.

EPSS 0.6%public exploit CVSS 9.1

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2024-3050 · Unknown Site Reviews

Site Reviews < 7.0.0 - IP Spoofing

EPSS 0.6%public exploit CVSS 9.1

douchat1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-35324 · douchat douchat

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.

EPSS 2%CVSS 9.8

Dassault Systèmes1 vulnerability on this pageMax CVSS 9.0Priority 44KEV 0

CVE-2024-3300 · Dassault Systèmes DELMIA Apriso

Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

EPSS 3%CVSS 9.0

Linux9 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-36886 · Linux Linux

tipc: fix UAF in error path

EPSS 1%CVSS 9.8

CVE-2024-36031 · Linux Linux

keys: Fix overwrite of key expiration on instantiation

EPSS 0.7%CVSS 9.8

CVE-2024-36912 · Linux Linux

Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl

EPSS 1.0%CVSS 9.6

CVE-2024-36896 · Linux Linux

USB: core: Fix access violation during port device removal

EPSS 0.9%CVSS 9.1

CVE-2024-36911 · Linux Linux

hv_netvsc: Don't free decrypted memory

EPSS 0.6%CVSS 9.8

CVE-2023-52881 · Linux Linux

tcp: do not accept ACK of bytes we never sent

EPSS 0.6%CVSS 9.8

CVE-2024-36913 · Linux Linux

Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails

EPSS 0.7%CVSS 9.3

CVE-2024-36958 · Linux Linux

NFSD: Fix nfsd4_encode_fattr4() crasher

EPSS 0.5%CVSS 9.8

CVE-2024-36909 · Linux Linux

Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted

EPSS 0.2%CVSS 9.3

glboy1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-5150 · glboy OTP Login With Phone Number, OTP Verification

Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check

EPSS 0.8%CVSS 9.8

dedecms1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-35510 · dedecms dedecms

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code vi…

EPSS 0.7%CVSS 9.8

MinMax Digital Technology1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-5514 · MinMax Digital Technology MinMax CMS

MinMax CMS - Hidden Functionality

EPSS 0.7%CVSS 9.8

SaltOS1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-5407 · SaltOS RhinOS

Code Injection vulnerability in RhinOS from SaltOS

EPSS 0.6%CVSS 10.0

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-5515 · SourceCodester Stock Management System

SourceCodester Stock Management System createBrand.php sql injection

EPSS 0.6%CVSS 9.8

renehermi1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-3412 · renehermi WP STAGING – WordPress Backup, Restore & Migration

WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload

EPSS 0.8%CVSS 9.1

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-36470 · JetBrains TeamCity

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases

EPSS 0.5%CVSS 9.8

OpenText1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-3969 · OpenText iManager

XML External Entity injection vulnerability in iManager

EPSS 0.5%CVSS 9.8

cdg1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-35563 · cdg server

CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPe…

EPSS 0.4%CVSS 9.8

Grup Arge Energy and Control Systems1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2024-0851 · Grup Arge Energy and Control Systems Smartpower

SQLi in Grup Arge Energy and Control Systems's Smartpower

EPSS 0.4%CVSS 10.0

Vadi Corporate Information Systems1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2024-1100 · Vadi Corporate Information Systems DIGIKENT GIS

SQLi in Vadi Corporate Information Systems' DIGIKENT GIS

EPSS 0.4%CVSS 10.0

The archive.